openshift
diff --git a/‎pkg/cloud/aws/aws_config_transformer.go‎
Lines changed: 5 additions & 0 deletions b/‎pkg/cloud/aws/aws_config_transformer.go‎
Lines changed: 5 additions & 0 deletions
diff --git a/‎vendor/k8s.io/cloud-provider-aws/pkg/providers/v1/config/config.go‎
Lines changed: 9 additions & 3 deletions b/‎vendor/k8s.io/cloud-provider-aws/pkg/providers/v1/config/config.go‎
Lines changed: 9 additions & 3 deletions
@@ -83,4 +83,9 @@ func setOpenShiftDefaults(cfg *awsconfig.CloudConfig) {
 		// health check endpoint served by OVN.
 		cfg.Global.ClusterServiceLoadBalancerHealthProbeMode = "Shared"
 	}
+	if cfg.Global.NLBSecurityGroupMode != awsconfig.NLBSecurityGroupModeManaged {
+		// OpenShift enforces security group by default when deploying
+		// service type loadbalancer NLB.
+		cfg.Global.NLBSecurityGroupMode = awsconfig.NLBSecurityGroupModeManaged
+	}
 }
Original file line number	Diff line number	Diff line change
`@@ -83,4 +83,9 @@ func setOpenShiftDefaults(cfg *awsconfig.CloudConfig) {`
`83`	`83`	`// health check endpoint served by OVN.`
`84`	`84`	`cfg.Global.ClusterServiceLoadBalancerHealthProbeMode = "Shared"`
`85`	`85`	`}`
	`86`	`+ if cfg.Global.NLBSecurityGroupMode != awsconfig.NLBSecurityGroupModeManaged {`
	`87`	`+ // OpenShift enforces security group by default when deploying`
	`88`	`+ // service type loadbalancer NLB.`
	`89`	`+ cfg.Global.NLBSecurityGroupMode = awsconfig.NLBSecurityGroupModeManaged`
	`90`	`+ }`
`86`	`91`	`}`